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Sir: 

This is a Reply Brief submitted in response to the Examiner's Answer that was 
mailed on July 3, 2006. These remarks are directed to the Response to Argument section 
of the Examiner's Answer. 

The statements in the paragraph bridging pages 13 and 14 and the. succeeding 
paragraph are confused and incorrect. Moreover, the supposed quote of the claim 
language is inaccurate and misleading. The Answer associates the recitation of "creating 
an object associated with the computer user or the Session ID" (which is recited in step f 



of claim 1 and the second element of claim 7) with the recitation of "storing at least a 
portion of the security information in an object" (which is recited in the third step of 
claim 27). The Answer is misleading because it implies that there are two different 
objects by putting together limitations from different independent claims. Claims 1 and 7 
actually go on to recite "copying at least some of the security information relating to the 
computer user from the user profile database to the object in the directory" (i.e., the same 
object). The language quoted from claims 1 and 7 does not appear in claim 27, and the 
language quoted from claim 27 is the first recitation of "object". 

The Answer tries to equate the session key of Alegre with an object. This 
attempt fails because in each claim of the present application, the recited object is an 
entity within a directory wherein the object stores security information. In claims 1 and 7, 
the object may be associated with the Session ID, but the Session ID is not recited to be 
the security information stored in the object as the Answer seems to suggest. The 
defective interpretation of the claims relied on in the Answer undermines the alleged 
anticipation by Alegre. The rejection suggests that both the session key and cookie in 
Alegre are objects. Neither one meets the claimed limitation of the object as actually 
recited. 

The comments in the Answer on pages 14-16 concerning the difference 
between "authenticated and authorized" and "authenticated or authorized" is not germane 
to applicant's arguments. What applicant has pointed out is that security information can 
be used for separate first and second remote applications, a fiinction that Alegre is 
incapable of. 

The other comments in the Answer conceming the teachings and/or motivation 
to combine Alegre, Hartmant, and Blanco are already addressed in the Brief filed on 
May 4, 2006. 
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Accordingly, the final rejection dated January 26, 2006, should be reversed. 

Respectfully submitted. 




Mark L. MoUon 
Registration No. 31,123 
Attorney for Appellant 



Date: July 17, 2006 

MacMillan, Sobanski & Todd, LLC 

One Maritime Plaza, Fifth Floor 

720 Water Street 

Toledo, Ohio 43604 

Tel: 734-542-0228 

Fax: 734-542-9569 



-3- 
(09/664,893) 



